Automated EC2 Image Builder pipeline that builds STIG-hardened Amazon Linux 2023 AMIs, validates them with OpenSCAP against a configurable release gate, retains the assessment evidence in Amazon S3, and restricts EC2 launches to approved images with a declarative Allowed AMIs policy. - View it on GitHub